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Abstract 

In this paper we obtain realizations of the 4-dimensional general 
symplectic group over a prime field of characteristic t > 3 as the Ga- 
lois group of a tamely ramified Galois extension of Q. The strategy 
is to consider the Galois representation pi attached to the Tate mod- 
ule at I of a suitable abelian surface. We need to choose the abelian 
varieties carefully in order to ensure that the image of pt is large and 
simultaneously maintain a control on the ramification of the corre- 
sponding Galois extension. We obtain an explicit family of curves of 
genus 2 such that the Galois representation attached to the ^-torsion 
points of their Jacobian varieties provide tame Galois realizations of 
the desired symplectic groups. 

1 Introduction 

A central problem in number theory is the study of the structure of the 
absolute Galois group Gq = Gal(Q/Q). The Inverse Galois Problem over Q, 
first considered by D. Hilbert, can be reformulated as a question about the 
finite quotients of this absolute Galois group. In spite of the many efforts 
made to solve the Inverse Galois Problem, it still remains open. Of course, 
these attempts have not been fruitless, and there are many finite groups that 
are known to be Galois groups over Q. For an idea of the progress made, the 
reader can leaf through [32] or [23] . 

Assume that a finite group G can be realized as a Galois group over Q, 
say G ~ Ga^A^/Q), where Ki/Q is a finite Galois extension. But perhaps 
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we are interested in field extensions with some ramification property, and 
Ki/Q does not satisfy it. We can ask whether there exists some other finite 
Galois extension, K2/Q, with Galois group G and enjoying this additional 
property. In this connection, several variants of the Inverse Galois Problem 
have been studied. 

This paper is concerned with the following problem, posed by Brian Birch 
(cf. [5], Section 2). 

Problem 1.1 (Tame Inverse Galois Problem). Given a finite group G, is 
there a tamely ramified Galois extension K/Q with Gal(K/Q) ~ G? 

This problem has already been dealt with for certain families of groups. It 
is known that solvable groups, all symmetric groups S n , all alternating groups 
A n , the Mathieu groups Mn and M12, and their finite central extensions are 
realizable as the Galois group of a tamely ramified extension (cf. [17], [28], 
[27]). 

One way to deal with the Inverse Galois Problem, and eventually with 
Problem 1.1, is to consider continuous Galois representations of the absolute 
Galois group of the rational field. Let V be a finite dimensional vector 
space over a finite field F, and consider a continuous representation of Gq 
(endowed with the Krull topology) in the group of automorphisms of V (with 
the discrete topology), say 

i> : G q • GL(y). 

Then 

Imp ~ G Q / kerp ~ Gal(K/Q), 

where K/Q is a finite Galois extension. 

In other words, a continuous Galois representation of Gq provides a re- 
alization of Imp as a Galois group over Q. This strategy has already been 
used to address the Inverse Galois Problem for families of linear groups (cf. 
[35], [8], [9], [36], [10], [16]). 

In this paper we will study the Galois representations that arise through 
the action of the absolute Galois group Gq on the ^-torsion points of abelian 
surfaces. 

For each prime number p, let us fix an immersion Q Q p . This induces 
an inclusion of Galois groups Gal(Q p /Q p ) C Gq. Inside Gal(Q p /Q p ) we 
can consider the inertia subgroup I p = Gal(Q p /Q P)Unr ) and the wild inertia 
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subgroup ip )W = Gal(Q p /Q P)t ), where Q PiUn r and Q Pit denote the maximal 
unramified extension and the maximal tamely ramified extension of Q p , re- 
spectively. A prime p is unramified (respectively tamely ramified) in the Ga- 
lois extension K/Q if and only if p(I p ) = {Id} (respectively p(/ p , w ) = {Id}). 
Therefore, if we want a Galois representation p to yield a tamely ramified 
Galois extension K/Q, we will have to ensure that p(I p , w ) = {Id} for all 
prime numbers p. 

In [2], the authors apply this strategy to solve Problem 1.1 for the family 
of 2-dimensional linear groups GL^F^). More precisely, they consider the 
Galois representations attached to the ^-torsion points of elliptic curves, and 
construct explicitly elliptic curves such that this representation is surjective 
and moreover the image of the wild inertia group J PiW is trivial for all primes 
p. In this paper we will extend these results to the case of curves of genus 2. 
Namely, we will prove that, for all prime number I > 5 there exist (infinitely 
many) genus 2 curves C such that the Galois representation attached to 
the ^-torsion points of the Jacobian of C provides a tamely ramified Galois 
realization of GSp 4 (F^) (cf. Theorem 5.5). 

We want to thank Luis Dieulefait for many enlightening conversations. 

2 The Action of the Inertia Group 

Let A/Q be an abelian variety of dimension n, and let us fix a prime £. 
Consider the Galois representation 

Pe : G Q - Aut(A[£}) ~ GL 2ri (F,). 

attached to the ^-torsion points of A. This representation gives rise to a 
realization of Imp^ as Galois group over Q, say Imp^ ~ GaA(K/Q), where K 
is the number field fixed by ker p£. In this section we are interested in finding 
conditions over the variety A that ensure that K/Q is tamely ramified. 

Note that it suffices to control the image by pe of J PiW just for a finite 
quantity of primes p. Indeed, 7 P;W is a pro-p-group, so that if p does not 
divide the cardinal of GL 2ri (F£), the cardinal of Im(7 p w ) must be p° — 1. 

We will first address the problem of obtaining tame ramification at a 
prime p^f. Let us place ourselves in a more general setting. Let F be a 
number field, and let us consider an abelian variety A/F. Let p be a prime 
ideal of the ring of integers Op of F. We begin by recalling what it means 
for A to have semistable reduction at p (see [13], § A. 9. 4.). 
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Definition 2.1. We will say that A/F has semistable reduction at a prime 
p G Spec Op if the connected component of the special fibre of the Neron 
model of A at p, Ap, is the extension of an abelian variety by a torus. 

The kind of reduction of an abelian variety at a prime p is reflected 
in the action of the inertia group at p on the Tate module of the variety 
For instance, if the variety has good reduction, the Neron-Ogg-Shafarevich 
criterion ensures that the inertia group acts trivially on the Tate module. 
Moreover, a result of Grothendieck characterizes the case when the reduction 
is semistable in terms of the action of the inertia group. As a consequence, 
we have the following result. 

Theorem 2.2. Let A/Q be an abelian variety, and let £,p be two different 
prime numbers. Assume that A has semistable reduction at p. Then the 
image of the wild inertia group I PtW by the Galois representation pe is trivial. 

Proof. Let us see that I PjW acts trivially on T t (A). By Proposition 3.5 of [12], 
we know that there exists a submodule T' C Te(A), fixed by the action of I p , 
and such that I p acts trivially on both T' and T e (A)/T'. Taking a suitable 



But the order of such a matrix is a divisor of t. Since 7 p w is a pro-p-group, 



To control the image of the wild inertia group at the prime i is a much 
more subtle matter. The first author addresses this problem in [3], and 
obtains a condition that guarantees that the action is trivial (Theorem 3.3). 
Let us recall the statement here. 

Theorem 2.3. Let I be a prime number, and let A/Q be an abelian variety 
of dimension n with good supersingular reduction at I. Call F the formal 
group law attached to A at £, vg the t-adic valuation on Q e and V the group 
of ' t -torsion points attached to F. Assume that there exists a positive a G Q 
such that, for all non-zero (x±, . . . ,x n ) G V , it holds that mm{vi(xi) : 1 < 
% < n} = a. 

Then the image of the wild inertia group by the Galois representation 
attached to the t-torsion points of A is trivial. 

This result will allow us to hold in check the action of the wild inertia 
group at £. 



basis of T t (A), I p acts through a matrix of the shape 




its elements all act as the identity. 



□ 
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3 Image of the Representation 



In the previous section we considered the tameness condition. Our aim in 
this section is to obtain some control on the image of the representation. 

Let us fix a prime £, let A/Q be an abelian variety of dimension n, and 
let us denote by pn : Gq — > GL 2n (F£) the Galois representation attached to 
the ^-torsion points of A. Assume A is principally polarized. Then the Weil 
pairing gives rise to a non-degenerated symplectic form on the group of £- 
torsion points of A, (•, •) : A[£] x A[£] — > F|. Furthermore, the elements of the 
Galois group Gq behave well with respect to this pairing. This compels the 
image of the representation to be contained in the general symplectic group 
GSp 2n (F,). ^ 

Now a well-known result of Serre states that, if the principally polarized 
abelian variety has the endomorphism ring equal to Z, and furthermore its 
dimension is either odd or equal to 2 or 6, then the image of the representation 
Pe is the whole general symplectic group for all but finitely many primes £ 
(see Theorem 3 of 137 in [34]). 

We are particularly interested in the case of abelian surfaces over Q. In 
this case, the result of Serre boils down to: 

Theorem 3.1. Let A/Q be an abelian surface, principally polarized, such 
that Endq^A) = Z. Then, for all but finitely many primes £, it holds that 

lmp e = GSp 4 (F,). 

We will take the explicit results of P. Le Duff [18] as our starting point. 
We will sketch some of his reasoning in order to make use of it later on, and 
then we will dwell upon some specific points where we need to modify it. 

The method of Le Duff rests upon finding a certain set of elements in the 
image of the representation which generate the whole GSp 4 (F^). Therefore, 
at the core of the method lies a theorem about generators of this group. 
More specifically, the main result upon which Le Duff builds his method is 
the following (see Theorem 2.7 of [18]): 

Proposition 3.2. The symplectic group Sp 4 (F^) is generated by a transvec- 
tion and an element whose characteristic polynomial is irreducible. 

It is easy to see that, if the image of the Galois representation con- 
tains the subgroup Sp 4 (F£), then it necessarily contains the whole group 
GSp 4 (F^), since the composition of the representation with the projection 
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GSp 4 (F^) — > GSp 4 (F^)/ Sp 4 (F^) equals the cyclotomic character, which is 
surjective. Therefore, the problem boils down to finding two elements in 
Imp^, satisfying that one is a transvection and that the other has an irre- 
ducible characteristic polynomial. 

This is the way we approached the matter at first, but in order to produce 
an element with irreducible characteristic polynomial in Imp^ we needed to 
make use of a conjecture of Hardy and Littlewood (namely Conjecture (F) 
of [14]). Following a suggestion by L. Dieulefait we have managed to devise 
a way to ensure a large image without resorting to this conjecture. 

Let us consider the following result (Theorem 2.2 of [18]). 

Theorem 3.3. Let G be a proper subgroup of Sp 4 (F^) ; and assume that G 
contains a transvection. Then one of the following three assertions holds. 

(1) G stabilizes a hyperplane and a line belonging to it. 

(2) G stabilizes a totally isotropic plane. 

(3) The elements of G stabilize or exchange two orthogonal supplementary 
non-totally isotropic planes. 

Remark 3.4. If G is a subgroup of Sp 4 (F^) which contains an element with 
irreducible characteristic polynomial, it cannot satisfy any of the three as- 
sertions of the theorem (see Theorem 2.7 of [18]). Therefore Proposition 3.2 
is an easy consequence of this result. 

Our strategy will be the following: for each of the three assertions, we 
shall ensure the existence of an element of G = Impe, contained in Sp 4 (F£), 
which does not satisfy it. In this way, we will prove that G cannot be a 
proper subgroup of Sp 4 (F£). Instead of asking directly that there exists an 
element with irreducible characteristic polynomial, which rules out the three 
possibilities at once, we will require that there are elements such that the 
corresponding characteristic polynomial decomposes in different ways. 

Remark 3.5. The second assertion in the above theorem occurs when G is 
contained in a maximal parabolic subgroup. In this case, it is easy to check 
that, choosing a suitable symplectic basis, this maximal subgroup consists 



the inverse matrix of A (cf. the remark following the proof of Theorem 2.2 




where (A x )* denotes the transpose of 
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in [18]). On the other hand, if the third assertion holds, then the elements 
of G leave two supplementary orthogonal non-totally isotropic planes stable, 
or else interchange them (this is case (3) of Proposition 2 of [15]). If an 
element of Sp 4 (F^) interchanges two such planes, then it can be seen that its 
trace is zero. Therefore an element which belongs to this kind of maximal 
subgroup either has trace or stabilizes two planes. Moreover, if it stabilizes 

(A *\ 

two planes, it can be expressed as I ^ ^ I with respect to some suitable 
basis, where A and B belong to SL 2 (F£). 

Let us consider an element in Sp 4 (F^), and call its characteristic poly- 
nomial P(X). It is easy to see that this polynomial can be written as 
P(X) = X 4 + aX 3 + bX 2 + aX + 1 for some a,b G F^. In turn, this implies 
that there exist a, (3 G such that P(X) decomposes as (X — ct)(X — (3){X — 
l/a){X - 1/(3) over ¥ e (for P(a) = implies that P(l/a) = 0). 

Now there are essentially two ways in which such a polynomial can break 
up in quadratic factors, namely 



The first case is labelled "unrelated" 2 -dimensional constituents and the 
second one "related" 2- dimensional constituents in [9]. 

There is a nice way to discern whether the first decomposition takes place. 
Namely, consider the polynomial Pq(X) = X 2 +aX+(b—2). The roots of this 
polynomial are precisely a + l/a, (3+1/(3. Therefore, if the first factorization 
occurs, this polynomial is reducible and its discriminant A = a 2 — 4b + 8 is 
a square in F^. To determine whether the other factorization takes place is 
more difficult. Given an element of Sp 4 (F^) with characteristic polynomial 
P(X) = X 4 + aX 3 + bX 2 + aX + l, we will denote A (P) = a 2 - 4b + 8. 

Theorem 3.6. Let G be a subgroup o/Sp 4 (F^) ; and assume that G contains 
a transvection. Furthermore, assume that it contains two elements whose 
characteristic polynomials, Pi(X) andP2(X), satisfy the following: denoting 
by cti, l/ai,(3i, l/(3i the four roots of Pi{X), % = 1,2, 



P(X) 




(X -a)(X- I/a)) • ((X -(3)(X- 1/(3)) 
(X-a){X-(3)) ■ ((X-l/a)(X-l/P)). 



• ai + l/ai,/3i + 1/Pi & F £ and a x + l/«i + (3 X + \/(3 x ^ 0. 



• a 2 + l/a 2 , (3 2 + l/fo G F £; A (P 2 ) ^ and a 2 ¥ e . 
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Then G equals Sp 4 (F^). 



Proof. Since G contains a transvection, Theorem 3.3 implies that either G 
is the whole symplectic group or else one of the assertions (1), (2) or (3) of 
the theorem holds. We will see that, in fact, none of them is satisfied. 

If assertion (1) holds, then all the elements of G must leave a line invari- 
ant. But this implies that each element has one eigenvalue which belongs to 
F^. But cki + l/«i and 0i + do not belong to F^. Therefore assertion 
(1) does not hold. 

Assume now that assertion (2) holds. Then G is contained in a group 
which stabilizes a totally isotropic plane. Therefore, with respect to a suitable 

symplectic basis, it is contained in a subgroup of the shape (^-i)*^ ( see 

Remark 3.5). In particular, this implies that if P{X) is the characteristic 
polynomial of an element of G, it must factor over F^ into two polynomials 
of degree two. Call the roots of one of the factors a and (3. Then the roots 
of the other factor are 1/a and 1/(5. 

Let us consider the polynomial P 2 (X) — (x — a 2 )(x — f3 2 )(x — l/a 2 )(x — 
l/(3 2 ). Labelling the roots anew if necessary, we can assume that a 2 and f3 2 
are the roots of one of the quadratic factors, as above. We can consider two 
cases: 

• f3 2 = l/a 2 or p 2 = a 2 . In this case P(X) can be factored as P(X) = 
(X 2 — AX + l) 2 for a certain A e F^. If we work out this expression, we 
obtain P(X) = X 4 +2AX 3 + (A 2 +2)X 2 +2AX+1. Writing out P(X) = 
A 4 + a 2 X 3 + b 2 X 2 + a 2 X + 1 and comparing these two expressions we 
obtain that A (P2) = 0, which contradicts our hypotheses on P 2 (X). 

• f3 2 7^ a 2 , l/a 2 . In this case, the polynomials (X — a 2 )(X — l/a 2 ) and 
(X — a 2 )(X — f3 2 ) are different, and both are defined over F^. Therefore, 
one can use the Euclid algorithm to compute their greatest common 
divisor (X — a 2 ). This implies that a 2 G F^, which contradicts our 
hypotheses on P 2 (X). 

Finally, assume that Assertion (3) holds. Then any element in G satisfies 
that either its trace is zero or it stabilizes two planes, which are supplemen- 
tary, orthogonal and are not totally isotropic (see Remark 3.5). Consider 
again the element with characteristic polynomial Pi(X). Since it has non- 
zero trace, it must stabilize two such planes. But then -Pi (A) should break 
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into two quadratic factors defined over F^. Moreover, since the determinant 
of the corresponding matrix is 1 for each of the factors (cf. Remark 3.5), their 
independent terms must be 1. But this means that the factors have to be 
(X — ai)(X — 1/ai) and (X — (3i)(X — l//3i), and we know these polynomials 
are not defined over F^. Therefore Assertion (3) cannot hold. □ 

4 Explicit Construction 

In this section we will face the problem of constructing explicitly, for a given 
prime number £, a genus 2 curve such that the Jacobian variety attached to 
it gives rise to a Galois representation yielding a finite Galois extension K/Q, 
tamely ramified, with Galois group GSp 4 (F^), thus providing an affirmative 
answer to the Tame Inverse Galois Problem for this group. In the preceding 
sections we have worked out some statements that give very accurate and 
explicit conditions for the Galois representation attached to the ^-torsion 
points of an abelian surface to satisfy the desired properties. Our aim in this 
section is to replace all these conditions by others, which are more restrictive, 
but are simply congruences modulo powers of different primes. We shall 
tackle each of the conditions separately; thus the section will be split in 
several different subsections. In the last section we shall state a theorem 
possessing a very explicit flavour. 

4.1 Explicit control of the ramification 

Assume we have a hyperelliptic curve C of genus g defined over a certain 
field k by an equation of the shape y 2 + Q(x) ■ y = P(x), where P(X) has 
degree 2g + 2. The discriminant of this equation is defined as 

A = 2~ 4(9+1) • disc(4P(:r) + Q{xf). 

It holds that if A ^ 0, the curve C is smooth (see [20], § 2). 

In fact, if we fix a prime p, the p-adic valuation of the discriminant is 
a bound of the conductor exponent of C, which in turn coincides with the 
conductor exponent of the Jacobian variety attached to C . 

Consider the genus 2 curve defined over Q by the hyperelliptic equation 

y 2 = X & + 1. 
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The discriminant of this equation is A = — 2 6 -3 6 . Therefore, A ^ (mod p), 
for p ^ 2,3. Now, if we have a genus 2 curve C defined by a hyperelliptic 
equation 

y 2 = /(*), (i) 

where f(x) G Z[x] is a polynomial of degree 6 such that f(x) = x 6 + l modulo 
a prime p > 3, then the prime p cannot divide the discriminant of Equation 
(1), thus C has good reduction at p. In this way, we obtain a condition that 
we can ask a curve to satisfy if we want it to have good reduction at a given 
prime p ^ 2,3. For the primes 2 and 3 one has to require other conditions. 
The following propositions provide these conditions. 

Proposition 4.1. Let C be a genus 2 curve given by the hyperelliptic equation 

y 2 = fix), 

where f(x) = fax 6 + f$x 5 + f^x A + + f 2 x 2 + f±x + fo G 7L\x\ satisfies: 

/o = / 6 = l (mod 3) f/ 2 = / 4 = l (mod 3) 
/i = / 5 = (mod 3) \/ 3 = (mod 3). 

T/ien C has good reduction at p = 3. 

Proof. The hyperelliptic equation = x 6 + x 4 + x 2 + 1 has discriminant 
A = —4194304 = 2 (mod 3). Because of the congruence conditions on 
the coefficients fo, . . . , fe, it is clear that the discriminant of the hyperelliptic 
equation defining C is congruent with A modulo 3, thus it is not divisible by 
3. □ 

Proposition 4.2. Let C be a genus 2 curve given by the hyperelliptic equation 

y 2 = fix), (2) 

where fix) = fax 6 + f 5 x 5 + /4X 4 + /3X 3 + fix 1 + f\X + fo G Z[x] satisfies that: 

fo = fe = l (mod 16) f/ 2 = / 4 = 4 (mod 16) 
/i = / 5 = (mod 16) \/ 3 = 2 (mod 16). 

T/ien i/ie Jacobian surface attached to C has either good reduction or 
semistable reduction at p = 2. 
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Proof. Let us consider the following change of variables 



x := x 

y := x 3 + 2y + I. 

Applying it to Equation (2), we obtain an equation with integer coeffi- 
cients, which are congruent to those of y + x 3 y + y 2 = x A + x 2 modulo 4. But 
the discriminant of this equation (modulo 4) is A = 2, therefore it is divisible 
by 2, and once only. Since the 2-adic valuation of the discriminant bounds 
the conductor exponent at 2, this ensures that the Jacobian surface attached 
to C has either good reduction or bad semistable reduction at 2. □ 

In this way we can construct an abelian surface J{C) with semistable 
reduction at any finite set of primes p ^ £. Concerning the prime £, in [3] the 
author gives a very explicit condition to ensure that the wild inertia group 
at £ acts trivially on the ^-torsion points of the Jacobian of a genus 2 curve. 
We recall this result here. 

Theorem 4.3. Let £ be a prime number, let a G F^ such that x 2 — x + a 
divides the Deuring polynomial He(x), and lift it to a G Z. The equation 

y 2 = x 6 + - — -x 4 + - — -x 2 + 1 

a a 

defines a genus 2 curve such that its Jacobian variety satisfies the hypothesis 
of Theorem 2.3. 

Moreover, in Theorem 6.4 of [3] this result is expanded to cover a larger 
family of curves. 

Theorem 4.4. Let £ be a prime number, let a e such that x 2 —x+a divides 
the Deuring polynomial Hg(x), and lift it to a e Z. Let / , /i, . . . , f§ G Z 
satisfy 

'/ 6 = /o (mod£ 4 ) 
h = h (mod^ 
U = f 2 (mod£ 4 ). 

Furthermore, assume that 

/ 6 = 1 (mod£) iU = ^ (mod 
/ 5 = (mod£) 1/ 3 = (modi). 
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The equation y 2 = fQX 6 + f 5 x 5 + f4X 4 + f 3 x 3 +f 2 x 2 +fiX+l defines a genus 
2 curve such that its Jacobian variety satisfies the hypothesis of Theorem 2.3. 

Remark 4.5. Note that the genus 2 curves from theorem 4.3 have a non- 
hyperelliptic involution. In fact, their Jacobians are reducible. Therefore, 
the image of the representations attached to the ^-torsion points of these 
Jacobians cannot be GSp 4 (F^). The enlargement of the family of curves 
carried out in Theorem 4.4 is thus essential to our construction. 

4.2 Control of the image: the transvection 

Our aim in this section is to ensure the existence of a transvection in the 
image of Gq by the Galois representation pi attached to the Jacobian of a 
genus 2 curve. Combining Proposition 1.3 and Lemma 4.1 of [18] we can 
state the following result: 

Proposition 4.6. Let p be a prime number, let C/Q be a genus 2 curve and 
J its Jacobian. Assume that C has stable reduction of type (II) or (VI) at 

P- 

If £ ^ p is a prime number such that it does not divide (J v : J°) (which 
denotes the order of the group of connected components of the special fibre of 
the Neron model of J at p), then there exists an element in the inertia group 
I p such that its image by pe is a transvection. 

Recall that if C is a smooth, projective, geometrically connected curve of 
genus g > 2 over a number field K, then C has stable reduction at a prime 
p if and only if the Jacobian variety attached to C has semistable reduction 
at p (see [21], Remark 4.26 of chapter 10). 

Proposition 4.6 leaves us a great amount of freedom to choose p, and as 
a matter of fact we will always choose p = 5. Of course, this construction 
will not work for £ = 5, but this is a minor hindrance. We just need a special 
construction for £ = 5. 

We want to build a genus 2 curve, defined over Q, with stable reduction 
of type (II) at 5. Moreover, we will require that the order of the group of 
connected components of the special fibre of the Neron model at 5 is 1 (thus 
ensuring that £ does not divide it). 

A theorem of Deligne and Mumford tells us that every smooth, geomet- 
rically connected, projective curve defined over a local field, say K, acquires 
stable reduction over a finite extension of K (see [21], Theorem 4.3 of Chapter 
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10). This stable reduction can belong to one of the following types (I), (II), 
(III), (IV), (V), (VI), (VII). When the curve has genus 2, Q. Liu has worked 
out a characterization of the type of (potential) stable reduction in terms of 
the Igusa invariants (see [19]). We will denote them by J 2 , J4, Je, Js, J10, and 
also h ■= J$ - 2 3 3J 4 , I12 ■= -2 3 J| + 3 2 J 2 JaJ 6 - 3 3 J| - J|J 8 . 

A technical remark should be made at this point. The results of Liu are 
stated over a local field K with separably closed residual field k. We shall 
assume, from now on, that our curve C is defined over Q PiUn r (the maximal 
unramified extension of Q p , which satisfies this condition). In this way, what 
we shall obtain after some reasoning is the existence of a transvection inside 
the Galois group of the extension Q p /Q PiU nr, which in fact is the inertia group 
at p. In the computation of the order of the group of connected components 
of the special fibre of the Neron model at p, the p-adic valuation in Q PiUnr 
shall come into play; but since Q P)Un r is an unramified extension of Q p , this 
valuation shall coincide with the usual valuation in Q p , without any need to 
normalize. Therefore, considering Q PiU nr as the base field will not give rise 
to any significant modification, and we shall be able to apply the results of 
Liu without paying any further attention to this point. We will just state 
the results concerning potential good reduction (that is to say, type (I)) and 
type (II). 

Theorem 4.7. Let R be a discrete valuation ring with maximal ideal m and 
quotient field K. Let C/K be a smooth geometrically connected projective 
curve of genus 2, defined by the equation y 2 = f(x), where f(x) is a degree 6 
polynomial. Denote by J 2 , . . . , J10 the Igusa invariants of f(x), and denote by 
Cg the geometric special fibre of a stable model ofC over some finite extension 
of K. Then it holds: 

• Cg is smooth if and only if J^Jio £ R for all i < 5. 

• C-s is irreducible with a unique double point if and only if J^J-vi e ^ 
for all i < 5 and «/f /^ 5 € m. // this is the case, the group $ of 
connected components of the Neron model at v is isomorphic to Z/eZ, 
where e = ^(J^J^) . 

Remark 4.8. In the first case in the theorem above, the curve C is said to 
have potential good reduction, and in the second case potential stable good 
reduction of type (II). 

Let us now turn our attention to a simple example: 
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Example 4.9. Let us consider the curve C defined by the following equation: 

y 2 = x 6 + X 5 + X 3 + X + 1. 

By using the Magma Computational Algebra System, we can compute 
the Igusa invariants of C. We obtain the following results: 

J 2 = -97/4, J 4 = 1323/128, J 6 = -14515/1024, 

J 8 = 3881491/65536, J 10 = 6845/256. 

Recall that the last of the invariants was the discriminant of the equation. 
Since J 10 = 6845/256 = 2~ 8 -5-37 2 , the only two odd primes of bad reduction 
are 5 and 37. Thus we know that, outside these two primes and possibly 2, 
the curve has good reduction. 

Let us study the type of reduction at 5. Computing J^Jio, for % = 
1, 2, 3, 4, 5, we see that, if p = 5 (and also if p = 37), these numbers do not 
all belong to Z p . Therefore, for p = 5 (and p = 37), the reduction of C at p 
is not good. 

Now we wish to determine if the reduction is of type (II). We have to 
compute f° r i — 1, 2, 3, 4, 5. We begin with I i2 ] 

1095163 , 

hi = = -2 ■ 37 • 29599. 

64 

Note that p = 5 divides the discriminant of the equation, but it does not 
divide 7 12 . And this is enough to ensure that the reduction at p = 5 is (po- 
tentially) stable of type (II). Moreover, since p = 5 divides the discriminant 
of the equation just once, the reduction is indeed stable. And it turns out 
that vrj(Jf I±2) — 6, which means that the order of the group of connected 
components of the special fibre of the Neron model at p — 5 is 1. 

Now we will take advantage of this example to state a general result: 

Theorem 4.10. Let C be a genus 2 curve defined over Q by the equation 
y 2 = f(x), where f(x) = f e x 6 + f 5 x 5 + fax 4 + f 3 x 3 + f 2 x 2 + f x x + f e Z[x] 
is a polynomial of degree 6 without multiple roots, satisfying that 

h = h = h = fi = fo = 1 mod 25 
U = h = mod 25. 
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Then C has stable reduction at 5, and this reduction is of type (II). The order 
of the group of connected components of the special fibre of the Neron model 
at p = 5 is 1 . 

Proof. Due to the congruence condition above, the discriminant of the equa- 
tion y 2 = f(x) is congruent to the discriminant of the equation y 2 = x 6 + x 5 + 
x 3 +x+l modulo 25, that is to say, it is congruent to 28037120 = 20 mod 25. 
Therefore p = 5 divides the discriminant of our equation once and only once, 
thus ensuring that the curve C has stable reduction. Let us see what type of 
reduction it has. Since the invariant I±2 of the polynomial x 6 + x 5 + x 3 + x + 1 
is not divisible by 5, the same holds for the invariant 1 12 °f f(%) (for both 
are congruent to each other modulo 25). Consequently, since the invariants 
J-2i belong to Z5 (the only denominators which can appear are the powers of 
2), Jl^I 12 G Z 5 . And finally, since 5 does divide the discriminant of f(x), 
that is to say, J 12 , it is clear that J^Iu belongs to the maximal ideal of Z 5 . 
Theorem 4.7 implies that the reduction is of type (II). 

□ 

4.3 Control of the image: characteristic polynomials 

Let us now deal with the existence of elements in Imp^ with particular char- 
acteristic polynomials. The candidate elements we are going to look at are 
the images of the Frobenius elements at primes different from £, where C has 
good reduction, since we have a great deal of information about their shape. 

Namely, let q 7^ £ be a prime number, and assume that J(C) has good 
reduction at q. Inside Gq we can consider the decomposition group at q, 
which is isomorphic to Gal(Q 9 /Q 9 ). Different immersions of Gal(Q 9 /Q 9 ) 
into Gq give rise to conjugate subgroups. Consider the Frobenius morphism 
x I— > x g in Gal(Fg/F 9 ). There are many liftings of this element to Gal(Q 9 /Q 9 ). 
Since C has good reduction at q, the image by pt of any two lifts of the 
Frobenius must coincide, and thus an element in GSp 4 (F^) is determined 
save conjugacy. In any case, the characteristic polynomial of an element in 
GSp 4 (F^) is not altered by conjugation, so this polynomial is well defined, 
independently of any choices we may make along the way. What does this 
polynomial look like? 

Let us consider the Frobenius endomorphism <p q acting on the reduction 
C of C at q. It is well known (see for instance [7], § 14.1.6, Theorem 14.16) 
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that the characteristic polynomial of <p q has the following shape: 

P{X) = X 4 + aX 3 + bX 2 + aqX + q 2 , 

for certain a, b G Z. More precisely, if we denote by Ni (resp. N 2 ) the 
number of points of C over ¥ q (resp. F ? 2), we can compute a and b by using 
the formulae 

Nl ' q ~ 1 (3) 
b:=(N 2 -q 2 -l + a 2 )/2. 

Furthermore, it can be proven (cf. Proposition 10.20 in [24]) that the 
polynomial obtained from P(X) by reducing its coefficients modulo I coin- 
cides with the characteristic polynomial of p^(Frob 9 ). 

In the previous section our problem was to construct a curve such that, 
at a certain well chosen prime p, it satisfied some condition. Our strategy 
there was to choose the prime p once and for all at the beginning; namely, 
we took p — 5, and we established a congruence condition modulo 5 2 such 
that, whenever it is satisfied by a genus 2 curve C, we achieve our objective. 
The first point in which this section differs from the previous one is that now 
we will not choose the primes q\ and q 2 beforehand; the primes q± and q 2 will 
actually depend on £. 

When we face this problem, a natural question arises: Given a prime q, 
what conditions must a pair (a, b) satisfy in order to ensure that the polyno- 
mial P(X) = X 4 + aX 3 + bX 2 + qaX + q 2 is the characteristic polynomial 
of the Frobenius endomorphism at q of a genus 2 curve? 

In [22], the authors address the problem of determining whether, given 
finite field ¥ q and a pair of positive natural numbers (Ni,N 2 ), there exists 
a genus 2 curve C with N\ points over ¥ q and A^2 points over ¥ q 2. We shall 
make use of their results. 

Firstly, let us recall the definition of a Weil polynomial (see Definition 2.2 
of [22]). * 

Definition 4.11. Let q be a power of a prime number. We will say that the 
polynomial P(X) = X 4 + aX 3 + bX 2 + qaX + q 2 e Z[X] is a Weil polynomial 
if \a\ < and 2\a\y/q - 2q<b<^ + 2q. 

Remark 4.12. To simplify the problem, we will always choose a = 1, so we 
will only have to take care to choose b satisfying 2^/q — 2q < b < | + 2q. 

Let us fix an odd prime number q. Collecting Theorem 2.15 and Theorem 
4.3 of [22], we can state the following result: 
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Theorem 4.13. Let P(X) = X 4 + aX 3 + bX 2 + qaX + q 2 G Z[X] be a Weil 
polynomial, and let A = a 2 —4b + 8q. Assume that A is not a square in Z, 
q\b and a 2 G" {0, q + b, 2b, 3(6 — q)}. Then there exists a smooth projective 
curve of genus 2, defined over ¥ q , with Ni = q + 1 + a points over ¥ q and 
N 2 = 2b — a 2 + q 2 + 1 points over ¥ q 2 . 

Remark 4.14. The previous result claims the existence of a genus 2 curve, 
say C, defined over ¥ q with Ni points over ¥ q and N 2 points over ¥ q 2. If q 
is odd, we know that there exists a hyperelliptic equation y 2 = f(x) defining 
C, with f(x) G ¥ q [x] a polynomial of degree 6 and without multiple roots. 
Since there is only a finite number of such polynomials f(x) G F g [x], one can 
compute the curve C simply by an exhaustive search, so one can say that 
this construction is effective. Nevertheless, there are algorithms to compute 
genus 2 curves with a given number of points over ¥ q and over ¥ q 2. For 
instance, see [11]. 

Keeping this result in mind, the following two propositions show us how 
to construct suitable q± and q 2 . 

Proposition 4.15. Let £ be an odd prime number. Choose qi such that 
qi = 1 (mod £). Then there exists a projective curve of genus 2, Ci/Q, 
such that it has good reduction at q 1 , and the characteristic polynomial of the 
Frobenius endomorphism at q 1} P\(X) = X A + a±X 3 + b\X 2 + q\a,\X + q\ 
satisfies that A (Pi) is not a square in ¥g and a\ ^ (mod £). 

Proof. Fix ai = l. Since qi = 1 (mod £), it follows that q\ > £. Therefore, if 
we choose any element bi G F^, there exists bi G Z, < bi < qi mapping into 
b ± . Therefore Pi(X) = X 4 + aiX 3 + b x X 2 + qio x X + q\ is a Weil polynomial. 
We will choose bi such that 1 — 4bi + 8qi is not a square in (since 4 is 
prime to £, the expression 1 — 4bi + 8q± runs through all the elements of F^ 
as bi varies, so this is clearly feasible). 

Now it is easy to check that the pair (ai,&i) satisfies all the conditions 
in Theorem 4.13, so that there exists a smooth projective curve of genus 2 
defined over F ?1 with a suitable number of points over F ?1 and ¥ q 2. Lifting 
this curve to Q, we obtain the curve we were seeking. □ 

Proposition 4.16. Let £ be an odd prime number. Choose q 2 such that 
q 2 = 1 (mod £) and q 2 > 3£. Then there exists a projective curve of genus 2, 
C 2 /Q, such that it has good reduction at q 2 , and the characteristic polynomial 
of the Frobenius endomorphism atq 2 , P 2 (X) = X 4 +a 2 X 3 + b 2 X 2 + q 2 a 2 X + q 2 
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satisfies that A (P 2 ) is « non-zero square in ¥ e but is not a square in Z, and 
Pi{X) does not break up in linear factors over¥ £ . 

Proof. As in the proof of Proposition 4.15, we will fix a 2 = 1. Note that, since 
q2 > 3£, for each element b 2 £ F^ there exist three values ofb 2 £Zj,0<b 2 < Q2 
such that 62 maps into 62, which can be taken as 62, £ + b 2 , 2£ + 62- 

Let us choose an element zGF< such that z 2 — 16g 2 is not a square in F^. 
Such an element exists: if we take any square x 2 G F^, and add — 16g 2 as many 
times as we wish, we can obtain any element in F^ that we like. In particular, 
if we consider the sequence x 2 , x 2 — I6q 2 , x 2 — 2 • 16(72, x 2 — 3- 16q 2 , • • • , a point 
will come when we obtain a non-square element. The previous element shall 
be our z 2 . If z 2 = 1, we will take z — 1. Now let us choose 62 < 92 such that 
1 — 462 + 8(72 is congruent to (z + l) 2 modulo £. This is possible for the same 
reason as in the proof of Proposition 4.15. Moreover, at the beginning of the 
proof we noted that there are, in fact, three possible choices for b 2 which are 
strictly smaller than q 2 . It is not difficult to check that for the three of them 
1 — 46 2 + 8(72 cannot be a square in Z. We have set this claim aside in Lemma 
4.17. Therefore, we can choose b 2 such that 1 — 4b 2 + 8q 2 is not a square in 
Z, and furthermore b 2 is not divisible by q 2 . 

If we choose b 2 in this way, it is easy to check that the conditions of Theo- 
rem 4.13 hold. Therefore, there exists a smooth projective genus 2 curve over 
¥ q2 such that the characteristic polynomial of the Frobenius endomorphism 
of q 2 is P 2 (X) = X 4 + a 2 X 3 + b 2 X 2 + q 2 a 2 X + q\. Now we ascertain that the 
thesis of our Proposition holds. It is clear that A (P 2 ) = (z + l) 2 (mod £) 
is a non-zero square in F^. It remains to show that P 2 {X) does not split 
into linear factors. Call a 2 , q 2 /a 2 , f3 2 , q 2 j ' f3 2 the roots of P 2 (X). The fact that 
Ao(P2) is a square tells us that the polynomials (X — a 2 )(X — q 2 /a 2 ) and 
(X — (3 2 )(X — q 2 //3 2 ) are defined over F^. We will achieve our objective if we 
see that one of these polynomials is irreducible over F^. Since both a 2 + q 2 /a 2 
and (3 2 + q 2 /(3 2 are roots of Pq(X) = X 2 + a 2 X + b 2 — (b 2 — 2q 2 ), they are given 

by the expressions a2± y/ a 2 4 ( fe2 2| ? 2 ) _ Interchanging a 2 and (5 2 if necessary, 
we can assume that a 2 + q 2 /a 2 = a2+ ^/ a ^^ 4 ^ 2 2q2 \ Therefore the polyno- 
mial (X — oi 2 ){X — q 2 /a 2 ) can be written as X 2 a2 +V a 2^ 4 ( fe 2 2q2 ^ X + q 2 , 

and its discriminant is 

A = ^ ~ fl2 + V a 2- 4 ( & 2-2g 2 ) j 2 _ 4 ^ 
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Let us compute this quantity modulo £. Since — 1, A = 1— 46 2 +8g2 = 
(z + l) 2 , we obtain that A = z ~^ 6g2 (mod £), which is not a square in F^ 
because of the choice of z. This proves that P2(X) does not decompose in 
linear factors over F^. 

□ 

Lemma 4.17. Let A be a natural number, and let t be a prime. Then the 
three numbers A, A — At, A — 8£ cannot be squares in Z. 

Proof. Assume that there exist x,y,z positive integers such that A = x 2 , 
A — Ai = y 2 and A — 8£ = z 2 . From the first two equations we obtain that 
Ai = x 2 - y 2 = (x + y)(x - y). Therefore i = ^ • Since t is a prime 
number, it follows that x — y = 2, and moreover I = ( y+2 J +y ■ (v +2 )~y — y _|_ \ 
The same reasoning applied to the last two equations yields that y — z = 2, 
and we can write £ = • = ( z+2 ^ +z . ( z +^~ z _ z _)_ \ j s clearly a 

contradiction. □ 



5 Main Result 

In this section we will state the main result concerning tame Galois real- 
izations of GSp 4 (F^). Our starting point is the following straightforward 
statement: 

Let C be a smooth projective curve of genus 2, defined over Q 
and such that, if we denote by J the Jacobian variety attached to 
C and by pe the Galois representation attached to the ^-torsion 
points of J, the following conditions are satisfied: 

• The Galois extension obtained by adjoining to Q the coor- 
dinates of the ^-torsion points of J is tamely ramified. 

• The image of pe coincides with the general symplectic group 
GSp 4 (F £ ). 

Then pi provides a tamely ramified Galois realization of GSp 4 (F^). 

Throughout this paper, we have sought to remodel these conditions in 
order to make them look like congruences. We have succeeded to a great 
extent. Replacing these conditions with those (more restrictive but simpler) 
obtained in the previous sections, we obtain the following result: 
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Theorem 5.1. Let C be a genus 2 curve defined by a hyperelliptic equation 



where f(x) = fax 6 + f$x 5 + f^x A + f^x 3 + f 2 x 2 + fix + fo G 7h\x\ is a polynomial 
of degree 6 without multiple factors. Let £ > 7 be a prime number, and let V 
be the set of prime numbers that divide the order o/GSp 4 (F^). 

Let a G F^ be such that the elliptic curve defined by y 2 = x 3 + (1 — 
a) /ax 2 + (1 — a) /ax + 1 is super singular. Furthermore, letq±,q 2 = 1 (mod £) 
be different prime numbers with q 2 > 3£. Let Ci/Q be a genus 2 curve such 
that it has good reduction at q±, and the characteristic polynomial of the 
Frobenius endomorphism at q\, Pi(X) = X A + a\X 3 + b\X 2 + q\a\X + q\ 
satisfies that A (Pi) is not a square in and a\ ^ (mod £). Let C2/Q be 
a genus 2 curve such that it has good reduction at q 2 , and the characteristic 
polynomial of the Frobenius endomorphism at q 2 , p2(X) = X A + a 2 X 3 + 
b 2 X 2 + q 2 a 2 X + q\ satisfies that A (P2) is a non-zero square in F^ but is 
not a square in 7L, and P 2 (X) does not break up in linear factors over F^. 
Consider hyperelliptic equations y 2 = CqX 6 + C5X 5 + C4X 4 + C3X 3 + c 2 x 2 + C\X + c 
and y 2 = d 6 x 6 + d 5 x 5 + d±x A + d 3 x 3 + d 2 x 2 + d\X + d defining C\ and C 2 . 

Assume that the following conditions hold: 

• The following congruences mod 2 4 hold: 



y 2 = fix), 



f/ = / 6 = l (mod 16) f/ 2 
1^ = ^ = (mod 16) \/ 3 



U = 4 (mod 16) 
2 (mod 16). 



• The following congruences mod 3 hold: 



f/ = / 6 = l (mod 3) f/ 2 
\/i = / 5 = (mod 3) \/ 3 



fi = 1 (mod 3) 
(mod 3). 



• The following congruences mod 5 2 hold: 




1 mod 25 



• The following congruences mod £ A hold: 



(f 6 = fo (mod£ 4 ) 
<f 5 = f! (mod£ 4 ) 
[h = f 2 (mod£ 4 ). 
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Furthermore, 




1 (mod £) 
(mod £) 



f\ = (1 — a) /a (mod £) 
fa = (mod*). 



• The following 



congruences mod qi hold: 



fi = 



Ci (modgi),? 



0,1,. ..,6. 



• The following 



congruences mod q 2 hold: 



fi = di (mod q 2 ),i 



0,1,..., 6. 



• For all p G V different from 2, 3, 5, q±, q 2 and £, the following congru- 
ences hold: 



Then the Galois representation attached to the £-torsion points of the 
Jacobian of C provides a tamely ramified Galois realization o/GSp 4 (F^). 

Proof. The existence of a G F^ follows from Theorem l-(b) of [6] (cf. Corol- 
lary 3.6 of [2]), and the existence of the genus two curves C\ and C 2 is 
proved in Propositions 4.15 and 4.16. The result is a direct consequence of 
the considerations made in the previous sections. □ 

A quick look at this theorem shows that, for each prime number £ > 7, 
there exists a genus 2 curve C satisfying all the hypotheses, simply because 
of the Chinese Remainder Theorem. Therefore, we may write the following 
corollary: 

Corollary 5.2. For each prime number £ > 7, there exists a Galois extension 
over Q which is tamely ramified and has Galois group GSp 4 (F^). 

Remark 5.3. As we remarked at the beginning of Section 4.2, we excluded 
the prime £ = 5 just in order to write a neat statement for all £ ^ 5. Let us 
now tackle the case £ = 5. Consider the hyperelliptic curve C defined over 
Q by the equation 



fo = fa = 1 (mod p) 
fi = fa = (mod p) 



fa = fa = (mod p) 
fa = (modp). 



y 2 = x & + 391300x 4 + 1170a; 3 + 1300a; 2 + 1. 



(4) 
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To simplify the notation, call / 6 = 1, f 5 = 0, / 4 = 391300, / 3 = 1170, 
/ 2 = 1300, h = 0, /o = 1. 

We can compute the reduction data of this particular curve by means 
of the algorithm of Liu (which is implemented in SAGE). We obtain that 
this curve has good reduction outside (possibly) the primes 2, 27792683 and 
195476205803858674906021. In any case, at the last two primes the con- 
ductor exponent is 1. Therefore the curve has stable reduction at all odd 
primes. The algorithm of Liu does not compute the conductor at the prime 
2. Nevertheless, in this case it is easy to check that the coefficients fa of the 
equation defining the curve satisfy that 

/ 6 = /o = l (mod 16) f/ 4 = / 2 = 4 (mod 16) 
f 5 = fa = (mod 16) \/ 3 = 2 (mod 16). 

Therefore, Proposition 4.2 ensures that the reduction of C at 2 is also 
stable. As a conclusion, we can say that the Galois representation attached 
to the 5-torsion points of the Jacobian surface of C is tamely ramified outside 
the prime I = 5. 

On the other hand, note that the equation defining C is congruent modulo 
5 4 with the supersingular symmetric equation y 2 = x 6 + 1300a; 4 + 1170a; 3 + 
1300a; 2 + I. This guarantees that the wild inertia group at 5 acts trivially on 
the group of 5-torsion points. 

Let us denote by pn : Gq — > GSp 4 (F 5 ) the Galois representation which 
arises from the action of the Galois group on the points of 5-torsion of the 
Jacobian variety attached to C. 

The computation of the reduction data of C at the prime p = 27792683 
shows that the stable reduction at p is of type (II). Therefore, this prime 
satisfies the hypothesis of Proposition 4.6. Furthermore the order of the 
group of connected components of the special fibre of the Neron model at p 
is 1, so it is not divisible by 5. This ensures the existence of a transvection in 
the group Imp^ C GSp 4 (F^). In order to prove that the image of the Galois 
representation is GSp 4 (F^), we will make use of Proposition 3.2. 

For instance, let us consider the prime q = 19. The number of points of 
C over Fig is 22, and the number of points of C over F 19 2 is 410. Therefore, 
Equations (3) allow us to compute the characteristic polynomial of the Frobe- 
nius endomorphism at q, namely P(X) = X 4 + 2X 3 + 26X 2 + 38X + 361. It 
is not difficult to ascertain that this polynomial is irreducible over F 5 . There- 
fore, we conclude that the image of p 5 is GSp 4 (F 5 ). Thus this group can also 
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be realized as the Galois group over Q of a tamely ramified extension. 

The previous remark allows us to state Corollary 5.2 without excluding 
the prime £ = 5: 

Corollary 5.4. For each prime number £ > 5, there exists a Galois extension 
over Q which is tamely ramified and has Galois group GSp 4 (F^). 

As a matter of fact, we have proven not just the existence of a tamely 
ramified Galois realization of GSp 4 (F^), but of infinitely many of them. 

Theorem 5.5. For each prime number £ > 5, there exist infinitely many 
tamely ramified Galois extensions over Q with Galois group GSp 4 (F^). 

Proof. If £ > 7, this is clear from the statement of Theorem 5.1. If £ = 5, note 
that the cardinal of GSp 4 (F 5 ) equals 37440000 = 2 9 -3 2 -5 4 -13. Therefore, each 
curve C given by a hyperelliptic equation congruent to (4) modulo a suitable 
power of the primes 2, 3, 5, 13, 27792683 will provide a tamely ramified Galois 
realization of GSp 4 (F 5 ). □ 

Remark 5.6. The symplectic group GSp 4 (F 2 ) is isomorphic to the symmet- 
ric group S 6 , thus it is already known to be realizable as the Galois group of a 
tamely ramified extension of Q (cf. Proposition 1 in [29]). If £ = 3, we hope 
that a tame Galois realization of GSp 4 (F 3 ) can also be obtained by using 
different techniques. For instance, one could make use of the isomorphism 
Sp 4 (F 3 ) ~ £7(4, 2) to obtain a regular realization of this group (cf. [23]), and 
then apply the techniques in [27]. 

6 Example 

In this section we will present an example to illustrate how Theorem 5.1 
allows us to compute explicitly genus 2 curves providing tame Galois real- 
izations of the group GSp 4 (F^). In fact, Theorem 5.1 can easily be turned 
into an algorithm to compute these genus 2 curves. Even though we have 
not explicitly formulated it in this way, we hope this example will clarify how 
the algorithm works. 

Firstly, note the simple well-known result: 
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Lemma 6.1. Let q be a prime number. Then 

2 n 

card(GSp 2n (F g )) = (q - l)q^ ]J(q^ - 1). 

3=1 

Let us take £ = 7. We will compute all the elements that appear in the 
statement of Theorem 5.1. 

• First of all, let us compute the set V of prime numbers which divide 
the order of GSp 4 (F^). Since £ = 7 and n — 2, Lemma 6.1 yields that 
card(GSp 4 (F^)) = 1659571200 = 2 10 • 3 3 • 5 2 • 7 4 . Therefore, the set of 
primes that divide the order of GSp 4 (F^) is V = {2, 3, 5, 7}. 

• Next, we need to compute the element a G F 7 such that the equation 
y 2 = x 3 + (1 — a) /ax 2 + (1 — a) /ax + 1 defines a supersingular elliptic 
curve. In order to do this, we compute the Deuring polynomial 

H 7 (x) = f 3 ) ' xj = x 3 + 2x 2 + 2x + l = (x + l)(x + 3)(x + 5). 

Therefore, x 2 — x + 5 = (x + l)(x + 5) divides the Deuring polynomial, 
so we can take a = 5 in F 7 . 

• The following elements that emerge are the primes q\ and q2- We must 
choose two different prime numbers, q\ and which are congruent 
to 1 modulo 7 and such that q 2 > 3 • 7 = 21. We may take g x = 29, 
q 2 = 43. Now we must find the genus 2 curves C\ and C 2 . 

— Choosing the curve C\. firstly, fix ai = 1. According to Proposi- 
tion 4.15, we need to find b\ such that 1 — 4 • b\ + 8 • 29 is not a 
square modulo £. For instance, we can take b\ — 1. Now that we 
have a pair (ai,&i), we seek a genus 2 curve over F 2 g with Ni = 
29 + 1 + ai = 31 points over F 29 and N 2 = 29 2 + 1 + 2&i - a 2 = 843 
points over F 29 2 . We know that such a curve exists, and if we scru- 
tinize the set of all hyperelliptic curves defined over F 29 (which is 
a finite set), we can obtain the curve given by the hyperelliptic 
equation y 2 = x 6 + x 5 + 17x + 5. 
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— Choosing the curve C 2 : again, fix a! = 1. According to Propo- 
sition 4.16, the first step is to find an element z G F 7 such that 
z 2 — 16 • 43 is not a square in F7. For instance, we can consider 
z = 1. Next, we must find b 2 such that 1 — 4-b 2 + 8-43 is congruent 
to (z + l) 2 = 4 modulo 7. For instance, take b 2 = 3. Note that 
1 — 4-3 + 8-43 = 333 is not a square in Z. We have a pair (a 2 , b 2 ). 
We must seek a genus 2 curve over F 43 with N\ = 43 + 1 + a 2 = 45 
points over F43 and N 2 = 43 2 + 1 + 2b 2 — a 2 = 1855 points over 
F432. Such a curve exists, and again an exhaustive search can 
provide it. For instance, we have taken the curve defined by the 
hyperelliptic equation y 2 = x 6 + x 5 + 3x 2 + 13x + 21. 

Let us now go through Theorem 5.1 replacing the elements that appear 
there by the ones we have chosen above: 

Proposition 6.2. Let C be a genus 2 curve defined by a hyperelliptic equation 



where f(x) = f6X 6 +f5% 5 +f4 : x' i +f 3 x 3 -\-f 2 x 2 +fix+f G Z[x] is a polynomial of 
degree 6 without multiple factors. Assume that the following conditions hold: 

• The following congruences mod 2 4 hold: 



y 2 = m, 



/o = / 6 = l (mod 16) 
/i = / 5 = (mod 16) 



/ 2 = / 4 
/s = 2 



e 4 (mod 16) 
(mod 16). 



• The following congruences mod 3 hold: 



fo = h = 1 ( mod 3) 
/i = / 5 = (mod 3) 



/ 2 = / 4 

/ 3 = o 



= 1 (mod 3) 
(mod 3). 



• T/ie following congruences mod 5 2 ZioZd: 




mod 25 
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The following congruences mod 7 4 hold: 



Furthermore, 




f 6 = f (mod7 4 ) 
h = h (mod7 4 ) 
h = f 2 (mod7 4 ). 



1 (mod 7) I U = 2 (mod 7) 
(mod 7) i/ 3 = (mod 7). 



The following congruences mod 29 hold: 



f/ 6 = l (mod 29) 

/ 5 = 1 (mod 29) 

U = (mod 29) 

l/ 3 = (mod 29) 



(mod 29) 
17 (mod 29) 
5 (mod 29). 



• The following congruences mod 

'/ 6 = 1 (mod 43) 

^5 = 1 (mod 43) 

< U = (mod 43) 

J 3 = (mod 43) 



hold: 

f 2 = 3 (mod 43) 
/1 = 13 (mod 43) 
/o = 21 (mod 43). 



Then the Galois extension Q(J(C)[7])/Q provides a tamely ramified Ga- 
lois realization 0/ GSp 4 (F 7 ). 

It is easy to construct infinitely many such curves. For instance, we may 
take the genus 2 curve defined by the hyperelliptic equation 

y 2 = x 6 + 9757776 • x 5 + 8853700 • x 4 + 10422426 • x 3 + 

+ 677292100 • x 2 + 3179077776 • x + 342862800. 
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